$ rpki-client -vvf repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft File: FE5652AD4702104DB082C396B05EE5D04542E7D7.mft (raw, json) Hash identifier: fduPaCLHLRF41XO3NJ39fQGyMpHW06S+MCifBxY6g50= Subject key identifier: 58:D6:75:AB:08:7D:26:60:82:68:D2:DC:72:5D:AC:8B:96:7D:BE:AC Authority key identifier: FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 Certificate issuer: /CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Certificate serial: 7DA252DF251301B831E9B5D585B6DD35A7D8A6CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft Manifest number: 016E Signing time: Sat 18 Oct 2025 11:01:53 +0000 Manifest this update: Sat 18 Oct 2025 10:56:53 +0000 Manifest next update: Tue 21 Oct 2025 21:23:53 +0000 Files and hashes: 1: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: 20qa29YtuQDpydBxT+l3i2qfQTa2+tFQJ7mFZgoSVhk=) 2: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: 03BXaxAzi9VaO+DQQ6QWjZsMJ2gPh3wF9aEYxb1vAPc=) 3: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: J6vL2iPNUwb9fYjqqj1vv1gpk3+iSC5RPrrqhYMFLI8=) 4: FE5652AD4702104DB082C396B05EE5D04542E7D7.crl (hash: TRoCzMe2ywnGmrYBUouQX12b1cPiLBqCK8k5riF7WXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a2:52:df:25:13:01:b8:31:e9:b5:d5:85:b6:dd:35:a7:d8:a6:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Validity Not Before: Oct 18 10:56:53 2025 GMT Not After : Oct 21 21:23:53 2025 GMT Subject: CN=58D675AB087D26608268D2DC725DAC8B967DBEAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:17:64:10:f2:c3:99:87:6c:21:dd:d8:ae: aa:5c:d8:9d:71:f0:f9:e6:91:2e:3c:c6:a0:a5:8c: 99:32:d3:b9:71:a0:fb:bd:57:47:89:c7:23:59:c1: 3d:2b:6b:1d:30:df:d3:ca:fc:c3:eb:cc:13:10:c1: c9:a8:cd:46:ab:22:e5:87:18:fc:70:d2:15:79:ef: 13:6f:1e:05:99:69:6b:b9:48:aa:35:c8:10:a4:48: 1a:c0:03:4e:70:90:2e:4b:75:49:a6:ee:5c:e4:71: 7a:a7:45:85:f7:83:e3:2e:94:87:16:d7:82:97:36: 15:ce:b8:e5:e4:92:7e:c2:9c:c6:39:cb:76:ba:d8: 5a:ca:ad:f1:bd:bd:cd:da:e8:58:93:35:e1:35:9e: 0b:25:91:fa:c6:31:f4:90:d4:2a:aa:af:4b:3e:12: 3e:a2:28:1e:46:95:e9:36:90:75:d1:3a:fb:35:8d: f6:a6:06:3a:c5:e9:57:01:2b:e7:49:b4:7c:7b:33: a3:88:17:63:f0:3f:67:7f:c4:da:cf:8c:3c:fb:47: 80:6f:d8:14:26:27:89:c1:0e:fa:ee:03:28:53:39: d5:94:f7:88:dc:ed:da:ee:b5:7d:78:31:09:48:92: e8:3b:d5:d9:f9:5e:79:cc:ec:0f:f4:4f:a4:50:be: d9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D6:75:AB:08:7D:26:60:82:68:D2:DC:72:5D:AC:8B:96:7D:BE:AC X509v3 Authority Key Identifier: keyid:FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:68:80:23:ae:a9:15:38:53:84:08:a3:0f:b2:dd:8d:08:bf: da:90:c1:4e:04:04:9d:b4:0b:93:9f:32:cc:ed:ba:6c:b3:3a: 73:f1:da:e8:d8:ed:c4:e8:dc:fe:c8:4e:86:ea:cf:85:e3:af: 53:cf:56:bb:c2:a1:c0:47:db:a3:fd:ad:e6:9e:d0:74:b3:43: ac:11:cc:fa:a1:9a:f6:4a:49:cf:d4:f3:0f:21:c1:5a:68:0d: ec:d1:83:93:cc:5c:60:d9:4d:c9:94:92:21:ed:9a:d9:85:17: a1:a3:ff:61:97:09:1e:12:92:2e:c1:d6:8e:12:89:ab:f7:bd: 1c:96:17:f1:cb:ad:de:55:84:6d:a4:49:46:52:d9:e4:5f:9d: 1d:62:0d:60:d5:98:3e:84:dd:97:3e:f5:76:a2:58:8a:56:f0: 6b:bc:75:38:d5:c5:38:58:38:64:4f:b6:f6:52:ee:1b:89:6a: 00:9e:e5:69:68:88:f7:4e:e9:1d:27:df:c3:7f:61:87:b4:65: 60:c2:be:bb:d1:6e:90:a5:12:97:72:29:c1:67:f8:aa:61:59: 88:7e:51:43:33:be:93:de:65:16:c5:cd:b5:58:51:91:fc:59: 0b:66:4f:aa:5f:bb:67:54:61:d5:cc:f8:18:01:2e:da:c6:3a: e1:22:3e:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfaJS3yUTAbgx6bXVhbbdNafYpswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0 NTQyRTdENzAeFw0yNTEwMTgxMDU2NTNaFw0yNTEwMjEyMTIzNTNaMDMxMTAvBgNV BAMTKDU4RDY3NUFCMDg3RDI2NjA4MjY4RDJEQzcyNURBQzhCOTY3REJFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uxdkEPLDmYdsId3Yrqpc2J1x 8PnmkS48xqCljJky07lxoPu9V0eJxyNZwT0rax0w39PK/MPrzBMQwcmozUarIuWH GPxw0hV57xNvHgWZaWu5SKo1yBCkSBrAA05wkC5LdUmm7lzkcXqnRYX3g+MulIcW 14KXNhXOuOXkkn7CnMY5y3a62FrKrfG9vc3a6FiTNeE1ngslkfrGMfSQ1Cqqr0s+ Ej6iKB5Glek2kHXROvs1jfamBjrF6VcBK+dJtHx7M6OIF2PwP2d/xNrPjDz7R4Bv 2BQmJ4nBDvruAyhTOdWU94jc7drutX14MQlIkug71dn5XnnM7A/0T6RQvtlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWNZ1qwh9JmCCaNLccl2si5Z9vqwwHwYDVR0j BBgwFoAU/lZSrUcCEE2wgsOWsF7l0EVC59cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2FmZDU3YS1lNmRlLTRhNWYtYjVjNi0xMDg2NWQ1YThjOTgvMC9GRTU2NTJBRDQ3 MDIxMDREQjA4MkMzOTZCMDVFRTVEMDQ1NDJFN0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0NTQy RTdENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdhZmQ1N2EtZTZkZS00YTVmLWI1 YzYtMTA4NjVkNWE4Yzk4LzAvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1 RDA0NTQyRTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZogCOuqRU4U4QIow+y3Y0Iv9qQwU4EBJ20 C5OfMsztumyzOnPx2ujY7cTo3P7ITobqz4Xjr1PPVrvCocBH26P9reae0HSzQ6wR zPqhmvZKSc/U8w8hwVpoDezRg5PMXGDZTcmUkiHtmtmFF6Gj/2GXCR4Ski7B1o4S iav3vRyWF/HLrd5VhG2kSUZS2eRfnR1iDWDVmD6E3Zc+9XaiWIpW8Gu8dTjVxThY OGRPtvZS7huJagCe5WloiPdO6R0n38N/YYe0ZWDCvrvRbpClEpdyKcFn+KphWYh+ UUMzvpPeZRbFzbVYUZH8WQtmT6pfu2dUYdXM+BgBLtrGOuEiPpk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:26:04 2025 by rpki-client